Multiple Vendor Statd Buffer Overflow Vulnerability

Solution:
Statd is required for use in deployed NFS systems. Therefore if you require NFS on systems which are vulnerable to this attack it is suggested you upgrade your OS or obtain the appropriate patches from your vendor.

Relavant patch information is contained in the reference section via the attached vendor advisories.

Caldera has released a hotfix for the Unixware 7 statd implementation.


SCO Unixware 7.0

SCO Unixware 7.0.1

SCO Unixware 7.1

SCO Unixware 7.1.1


 

Privacy Statement
Copyright 2010, SecurityFocus